OpenClaw skills.status could leak secrets to operator.read clients
OpenClaw versions up to 2026.2.13 could leak API secrets like Discord bot tokens to clients with read-only operator permissions through the skills.status gateway method. The vulnerability was patched in version 2026.2.14.
What happened
The gateway method skills.status in OpenClaw versions up to 2026.2.13 returned a requirements report that included configChecks[].value, the resolved value for each requires.config entry.
If a skill required a broad config subtree such as channels.discord, the report could include secrets like Discord bot tokens. The skills.status method is callable with operator.read permission, allowing read-scoped clients to obtain secrets without operator.admin or config.* access.
Reported impact
Read-scoped clients could obtain secrets such as Discord bot tokens without authorization.
Index analysis
OpenClaw patched the vulnerability in version 2026.2.14 by stopping the inclusion of raw resolved config values in requirement checks and narrowing the Discord skill requirement to the token key.
Governance controls
The vulnerability was reported by simecek and published on February 15, 2026. The fix was implemented in commits d342805 and ebc6886.
Classification
Sources and evidence
This record was researched and written by the Index, based on the following original reporting.